Kubernetes News
Weekly Kubernetes news for operators — core releases, CVEs and security advisories, networking and storage changes, and the day-two ops the quickstarts skip.
About Kubernetes News
Kubernetes is where most production incidents eventually lead, so we track it the way an on-call engineer actually experiences it: the CVE that drops in ingress-nginx on a Friday, the controller release that quietly changes a default, the operator upgrade that turns a routine deploy into a 2am page. Each brief below pulls the week's Kubernetes-adjacent stories — core releases, networking and storage changes, security advisories, and the day-two operational reality the quickstarts skip.
If you run clusters rather than demo them, this is the slice of On Call Brief worth bookmarking. We surface what changed, why it matters for the people holding the pager, and what (if anything) you should do about it before Monday.
Kubernetes in recent briefs
On Call Brief – Week of July 5–11, 2026
JadePuffer Demonstrates How AI Agents Can Automate Ransomware Attack; Microsoft, Google and Cloudflare just made 2029 the new quantum deadline; Cloudflare: 2 service incidents (Issues with…
On Call Brief – Week of June 28 – July 4, 2026
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer; Apple Fixes WebKit Flaws in iOS and macOS, With Help From AI Tools;…
On Call Brief – Week of June 21–27, 2026
I discovered a large-scale malware distribution on GitHub; Rokarolla Android Banking Trojan Turns Smartphones Into Weapons Against Users; MSG Breach: Knicks Take the NBA Championship, ShinyHunters…
On Call Brief – Week of June 14–20, 2026
ServiceNow Fixes Flaw That Could Lead to Unauthorized Access to Instances; ShinyHunters Secret to Success: Breaking the Trust Barrier; GitHub Removes PAT Requirement for Agentic Workflows…
On Call Brief – Week of June 7–13, 2026
Over 20,000 Instagram accounts stolen in Meta AI support hack; A postmortem of our May 7, 2026 outage; Holy git! Microsoft code-sharing site suffers downtime, despite…
On Call Brief – Week of May 31 – June 6, 2026
The 28-Hour Meltdown: What Happened When AWS US-EAST-1 Overheated; Google Cloud Suspends Railway's Production Account; AWS Organizations emits CloudTrail events for account membership changes - Only…
On Call Brief – Week of May 24–30, 2026
DevOps'ish 310: The Breaches Are Coming From Inside the Extension Store; The War Between Wars: How an IRGC Front Runs Destructive OT and IT Attacks Under…
On Call Brief – Week of May 17–23, 2026
CISA Credentials, Sensitive Data Exposed in GitHub Repository; GitHub Breach Tied to Malicious VS Code Extension Exposes Thousands of Internal Repositories; Researcher says Microsoft secretly built…
On Call Brief – Week of May 10–16, 2026
EdTech Firm Instructure Pays Ransom as U.S. House Starts Investigation; Instructure Pays Ransom to Canvas Hackers; Cloudflare: 12 Scheduled Maintenance Windows (Network Performance Issues, Los Angeles,…
On Call Brief – Week of May 3–9, 2026
How a Cursor AI agent wiped PocketOS’s production database in under 10 seconds; When DNSSEC goes wrong: how we responded to the .de TLD outage; Argo…
On Call Brief – Week of April 26 – May 2, 2026
Microsoft Outlook for iOS still down and out for many after 'service change'; GitHub Faces Scaling Issues as AI Development Surges; China-Backed Groups Are Using Massive…
On Call Brief – Week of April 19–25, 2026
Everyone Wants Servers And Nobody Wants Servers; ingress-nginx to Envoy Gateway migration on CNCF internal services cluster; Cloudflare: 8 Scheduled Maintenance Windows (Sydney, Salt Lake City,…
On Call Brief – Week of April 12–18, 2026
A guide to the breaking changes in GitLab 19.0; 76 The Cost of Assumptions ⚡; Ashby taught us we have to fight fire with fire
On Call Brief – Week of April 5–11, 2026
GitHub availability report: March 2026; Another One Bites the Dust: What the CDKTF Deprecation Means for You; Dutch healthcare software vendor goes dark after ransomware attack
On Call Brief – Week of March 29 – April 4, 2026
Trivy Supply Chain Attack Hits Docker Images in TeamPCP Campaign; Building SRE Error Budgets for AI/ML Workloads: A Practical Framework; LAX (Los Angeles) on 2026-03-30
On Call Brief – Week of March 22–28, 2026
Another One Bites the Dust: What the CDKTF Deprecation Means for You; Windows Server 2025 SMB SID hardening is beachballing legacy clients; DevOps'ish 301: Super Micro…
On Call Brief – Week of March 15–21, 2026
Major Breach — McKinsey's Lilli AI system compromised in under two hours, exposing millions of confidential client; Perplexity's Personal Computer system and Mistral's zero-exposure training address…
On Call Brief – Week of March 8–14, 2026
Policy in Bedrock AgentCore is now GA; Accelerate Lambda durable functions development with new Kiro power - AWS; 👀 Claude Code now runs while you sleep
On Call Brief – Week of March 1–7, 2026
[Last Week in AWS] Issue #460: Bedrock Throttling Guide: AWS Publishes Its Own Roast; What Google Cloud announced in AI this month; What’s new with Google…
On Call Brief – Week of February 22–28, 2026
Perplexity Computer 💻, DeepSeek withholds v4 🐋, Cowork scheduled tasks 💼; Claude Cowork updates 💼, KiloClaw agents ⚡, intelligence yield 🧠; CVE-2025-31133, CVE-2025-52565, CVE-2025-52881 - runc…
On Call Brief – Week of February 15–21, 2026
[Last Week in AWS] Issue #460: Bedrock Throttling Guide: AWS Publishes Its Own Roast; [Last Week in AWS] Issue #460: Bedrock Throttling Guide: AWS Publishes Its…
On Call Brief – Week of February 8–14, 2026
Signal Outage [Ongoing]; Hetzner Outage; Privilege Escalation in Aurora PostgreSQL using AWS JDBC Wrapper, AWS Go Wrapper, AWS NodeJS Wrapper, AWS Python Wrapper, AWS PGSQL ODBC…
From the podcast
Prefer to listen? Ship It Weekly is our companion DevOps & SRE podcast.
Frequently asked questions
What does On Call Brief's Kubernetes News cover?
The week's Kubernetes-adjacent stories an on-call engineer actually feels: core releases, the CVE that drops in ingress-nginx on a Friday, controller releases that quietly change a default, networking and storage changes, security advisories, and the day-two operational reality the quickstarts skip.
Who is this for?
Engineers who run clusters in production rather than demo them — the people holding the pager who need to know what changed, why it matters, and what to do about it before Monday.
How often is it updated?
On Call Brief publishes weekly. Each brief that covers Kubernetes is added to this hub automatically, so the list reflects the latest issues.
Is there a podcast version?
Yes — Ship It Weekly's Kubernetes hub, linked from this page, is the audio companion with practitioner conversations on running Kubernetes in production.
How do I get it in my inbox?
Use the subscribe form on this page to get one short email a week with the operationally relevant Kubernetes change of the week.